dependabot.yml 1.4 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051
  1. version: 2
  2. updates:
  3. - package-ecosystem: "maven"
  4. directory: "/"
  5. schedule:
  6. interval: "weekly"
  7. day: "monday"
  8. time: "06:00"
  9. timezone: "Etc/UTC"
  10. groups:
  11. java-test-dependencies:
  12. patterns:
  13. - "org.junit.jupiter:*"
  14. - "org.mockito:*"
  15. - "org.hamcrest:*"
  16. - "com.google.jimfs:jimfs"
  17. maven-build-plugins:
  18. patterns:
  19. - "org.apache.maven.plugins:*"
  20. - "org.jacoco:jacoco-maven-plugin"
  21. - "org.owasp:dependency-check-maven"
  22. - "me.fabriciorby:maven-surefire-junit5-tree-reporter"
  23. - "org.codehaus.mojo:license-maven-plugin"
  24. javafx:
  25. patterns:
  26. - "org.openjfx:*"
  27. java-production-dependencies:
  28. patterns:
  29. - "*"
  30. exclude-patterns:
  31. - "org.openjfx:*"
  32. - "org.apache.maven.plugins:*"
  33. - "org.jacoco:jacoco-maven-plugin"
  34. - "org.owasp:dependency-check-maven"
  35. - "me.fabriciorby:maven-surefire-junit5-tree-reporter"
  36. - "org.codehaus.mojo:license-maven-plugin"
  37. - "org.junit.jupiter:*"
  38. - "org.mockito:*"
  39. - "org.hamcrest:*"
  40. - "com.google.jimfs:jimfs"
  41. - package-ecosystem: "github-actions"
  42. directory: "/" # even for `.github/workflows`
  43. schedule:
  44. interval: "monthly"
  45. groups:
  46. github-actions:
  47. patterns:
  48. - "*"
  49. labels:
  50. - "misc:ci"